New U.S. Application (U.S. National Phase of 
International Application No. PCT/EP2004/003004) 
Preliminary Amendment dated September 21, 2005 

Amendments to the Specification; 

The following amendments to the Specification refer to the English translation of the 
international application, a copy of which is provided herewith. 

Immediately preceding paragraph [0001] on page 1, please insert the following 
Heading and Subheading: 

"BACKGROUND OF THE INVENTION 
L Field of the Invention— 

Immediately preceding paragraph [0002] on page 1, please insert the following 
Subheading: 

—2. Description of the Related Art~ 

Immediately preceding paragraph [0007] on page 2, please insert the following 
Heading: 

- SUMMARY OF THE BSfVENTION- 

Please replace paragraph [0007] with the following amended paragraph: 

[0007] The An object of the invention is accordingly to avoid the problems of the prior art 
at least to some extentT-and-t e. In particular, the invention should provide a technique for the 
controlled execution of a program, the program being intended for a virtual machine, on a 
portable data carrier, by means of which technique security risks in the event of an attack or a 
malfunction are avoided. In preferr e d some e mbodiments, reliable protection is to be achieved 
with as little loss of performance of the portable data carrier as possible. 

Please replace paragraph [0008] with the following amended paragraph: 

[0008] According to the invention, ^ the above object is completely or partially 
achieved by a method having the foaturos of claim 1, by a portable data carrier having th e 
features of claim 10 and by a comput e r program product having the features of claim 11. The 
HnpnnHnnt rlnimr , rninto tn pmfnrrftd ftmhndimentri of tho invention for the controlled execution 
of a program, the program being intended for a virtual machine, on a portable data carrier. 
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wherein the data carrier has a processor which executes at least a first and a second virtual 
machine, the program is executed both by the first and bv the second virtual machine, the 
operating state of the first virtual machine and the operating state of the second virtual 
machine are checked during execution of the program for correspondence, and execution of 
the program is aborted if a difference is found between the operating state of the first virtual 
machine and the operating state of the second virtual machine . 

Please insert the following new paragraphs [0008.1] and [0008.2] immediately 
following amended paragraph [0008]: 

[0008.1] Further according to the invention, the above object is completely or partially 
achieved by a portable data carrier having a processor, an operating system, at least a first and 
a second virtual machine, and a program, wherein the processor executes both the first and 
second virtual machine, the program is executed both by the first and by the second virtual 
machine, the operating system controls the processor to check the operating state of the first 
virtual machine and the operating state of the second virtual machine during execution of the 
program for correspondence, and the operating system controls the processor to abort 
execution of the program if a difference is found between the operating state of the first virtual 
machine and the operating state of the second virtual machine. 

[0008.2] Yet further according to the invention, the above object is completely or partially 
achieved by a computer program product having program instructions for causing a processor 
of a portable data carrier to perform a method for the controlled execution of a program, the 
program being intended for a virtual machine, wherein the processor executes at least a first 
and a second virtual machine, the program is executed both by the first and by the second 
virtual machine, the operating state of the first virtual machine and the operating state of the 
second virtual machine are checked during execution of the program for correspondence, and 
execution of the program is aborted if a difference is found between the operating state of the 
first virtual machine and the operating state of the second virtual machine. 

Immediately preceding paragraph [0020] on page 6, please insert the following 
Heading: 

"BRIEF DESCRIPTION OF THE DRAWINGS- 
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Immediately preceding paragraph [0025] on page 6, please insert the following 
Heading: 

-DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS- 

Please insert the following new paragraph [0039] immediately following 
paragraph [0038] found on page 11 of the specification as filed: 

[0039] The particulars contained in the above description of sample embodiments should 
not be constraed as limitations of the scope of the invention, but rather as exemplifications of 
preferred embodiments thereof. Accordingly, the scope of the invention should be determined 
not by the embodiments illustrated, but by the appended claims and their legal equivalents. 

Please Insert the following line immediately following new paragraph [0039] on 
page 11: 

—What is claimed is:— 
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